If this is your first visit, be sure to
check out the Forum Rules by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Re: Ettercap not scanning for hosts

Did you change the etter.conf?...
I quote:
"SSL dissection needs a valid 'redir_command_on' script in the etter.conf file
Privileges dropped to UID 65534 GID 65534..."
You need to uncomment the lines in /etc/etter.conf file: "redir_command_on and redir_command_off" in Linux section...
You cannot dissect SSL if iptables are not configured..That's why you need to uncomment those lines I mentioned...This is the reason to the warning mentioned above.

Also configure the ec_uid and ec_gid = 0 if not so...You need root priviledges to configure interfaces, once they are done by ettercap, then drops priviledges, to whom?..You tell that: 0=root, 65535 = nobody, or type at terminal prompt: id and it will give you your id and group. If prompt as #, is 0, if prompt as $, in my case is 1000.

If you are using BT5, leave it as 0 (root)..If in Debian (my case), Ubuntu, etc (ettercap installed in those OS) use id in $ mode, otherwise it wont work. I speak on my experience...

Once you configure your ettercap, try again..

Also make sure you are in the same subnet, as said by sickness, because if not, you just cannot scan any hosts, because there is nobody but you...

This how i use it: xx@xx#: ettercap -Tqi eth1 -M arp:remote // /gateway/ -P autoadd
My interface is eth1, you use yours accordingly.
gateway, you use the one in your subnet, in my case the gateway is 10.0.0.1
The plugin used by my is just in case after running ettercap, anyone connecting, is autoadded to the sniffing...
Hope it helps

Re: Ettercap not scanning for hosts

That's ok, I understand, no problem cuate..Here is what you have to do:
1. Open up a terminal.
2. In linux OS, you have a Hierarchical structure, so always keep this in mind: "/" is the root directory, the first level of the File structure.
The etter.conf is a configuration file to ettercap. So you have to type: nano /etc/etter.conf
The etter.conf is located under the /etc directory (etc is under "/" root directory, that is why /etc your are pointing to that directory)
3. You have to move within the file with the arrows, and take a look at the bottom, you will see the commands to write, exit, etc.Th. ey are represented as: ^X Exit, ^O Save..===== "^" = Ctl
4. Look for the "redir_command_on/off. Then go to the "linux" section.
5. You will see this:
# if you use iptables:
#redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
#redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"Change it to this (uncomment the 2 lines) (Quitele el signo de gato):
# if you use iptables:
redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
6. Then go to the top of the file, and you will see this:
[privs]
ec_uid = 65534 # nobody is the default
ec_gid = 65534 # nobody is the defaultChange it to this
ec_uid = 0 # nobody is the default
ec_gid = 0 # nobody is the default

Then just save it (Ctl + O) and then exit (Ctl + X).
Try again.

The scanning problem is not related to this matter I post above, you have to know if you are in the same subnet, do this:
1. Open up a terminal.
2. type: ifconfig
3 See your IP address.
4 Ex: router IP = 10.0.0.1
Subnet ID is = 10.0.0.0
Subnet Broadcast = 10.0.0.255
Subnet DHCP range = 10.0.0.1 to 254. Some routers have ranges starting from certain IP addresses.
So, all PC's in the subnet should be between 10.0.0.1 to 10.0.0.254, including gateway (router)..
If your IP is 10.0.0.102, all other hosts should be something like this: 10.0.0.106, 107, 108, and so on.

So if your ettercap is not finding any hosts, perhaps there are none or your ip is not in the subnet...

Re: Ettercap not scanning for hosts

As well, stay away from the GUI till you understand what yer doing syntax wise.

Do you know how to use other tools to scan for hosts? nmap...etc...??

V/r,
Snafu
Pffbt..[quote]I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... Or feels threatened by me.. Or thinks I'm a smart ass.. [/quote]